The JSC shell doesn't check for toString on the result of an expression throwing, so it will eventually result in incorrect behaviour in some cases. Trivial reproduction: 1. Start jsc 2. enter eval({toString:function(){throw{};}}); 3. goto 2
*** This bug has been marked as a duplicate of 20093 ***